STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must have the "rsyslog" package installed.

DISA Rule

SV-280983r1195368_rule

Vulnerability Number

V-280983

Group Title

SRG-OS-000479-GPOS-00224

Rule Version

RHEL-10-200640

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.
• CCI-000154 - Provide the capability to centrally review and analyze audit records from multiple components within the system.

Weight

10

Fix Recommendation

Configure RHEL 10 to have the "rsyslogd" package installed with the following command:

$ sudo dnf -y install rsyslogd

Check Contents

Verify RHEL 10 has the "rsyslogd" package installed with the following command:

$ sudo dnf list --installed rsyslog
Installed Packages
rsyslog.x86_64 8.2412.0-1.el10 @AppStream

If the "rsyslogd" package is not installed, this is a finding.

Vulnerability Number

V-280983

Documentable

False

Rule Version

RHEL-10-200640

Severity Override Guidance

Verify RHEL 10 has the "rsyslogd" package installed with the following command:

$ sudo dnf list --installed rsyslog
Installed Packages
rsyslog.x86_64 8.2412.0-1.el10 @AppStream

If the "rsyslogd" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5733